Skip to content

Awingu vs. Apache Guacamole

Comparing Apache Guacamole & Awingu

Awingu has a built-in RDP to HTML5 gateway. No wonder that we get compared to Apache Guacamole from time to time. In this blog we’ll have a look at what Guacamole is and how it compares to Awingu.

Apache Guacamole is a client-less remote desktop gateway. It supports standard protocols like VNC, RDP, and SSH. It is client-less in the sense that it delivers apps (or desktops) in HTML5 when Guacamole is installed on the back-end. Apache Guacamole is a free and open-source platform that is maintained by the Apache community.

As a free open-source tool, it got a nice basis of fans; from home-users to businesses to software companies. The latter embed Guacamole in their products (VPN and firewall vendors for example; even if most of them will be secretive about it).

How can they be compared exactly?

Awingu does not rely on Apache Guacamole

For starters, lets be clear about this: Awingu does not use (build on, rely on, ) Apache Guacamole. Awingu uses its own proprietary HTML5 gateway. I frequently hear the false claim that Awingu used Guacamole… and while this is true for a number of competitors in our space, it is certainly not for Awingu.

Awingu is a commercial product

Secondly, Awingu is a commercial product with a commercial organization around it. So this means we have extensive product documentation, technical support, technical trainings, commercial models for channel partners, contractual obligations, etc. That obviously means we sell our product and don’t offer it for free. I guess that’s the first big difference. Who will you call when you have a problem? What happens when there are security vulnerabilities identified? And so on.

This also extends into the organization behind Awingu. We are a very security and compliance focused organization, e.g. we are ISO27001 certified. I need of course to be very cautious as there is no such thing as absolute security: we continuously get pen-tested (by customers, internally and by neutral third parties) and always pass the bar, moreover our roadmap is very security / Zero Trust focused (with capabilities such as MFA, SSL, context awareness, usage audit, …). Apache Guacamole has been hit by a pretty severe vulnerability in July 2020. Since then, 5 other CVEs (Common Vulnerabilities and exposures) have been identified (and fixed!)

Furthermore, it means that we not only have a wide channel ecosystem with trained and certified engineers that covers big parts of the globe; but also that we have a set of tested technology partnerships (e.g. BlackBerry, OpsWat, IdenProtect, …) that extend and  complement the Awingu perimeter.

Differences on technology level

Thirdly, if we take a look at the technology perspective there are also some obvious (and less obvious) differences. Awingu was built with the idea that it should be simple to deploy and work with, for Windows or Linux admins. I think its not a false statement to claim Guacamole has most fans in the Linux and open-source communities.

Now, let’s take a deeper look in the architecture and features (this will not be an exhaustive list, but I try to list the main differences):

Some similarities:

  • HTML5 gateway & Protocols supported: Guacamole supports SSH, VNC and RDP. From that list, Awingu supports RDP. However, Awingu also supports WebDAV as well as CiFS and further Awingu’s built-in reverse proxy supports web applications.
  • Similar(ish) features for published applications:
    • HMTL5 access (browser-based access)
    • Virtual keyboard
    • Virtual (pdf) printer
    • Session sharing and session recording
    • MFA TOTP built-in, incl. support for RADIUS
  • Also similar to Awingu, Guacamole is not built to render highly graphical applications (e.g. 3D rendering), video or run video/voice calls
  •  

… and some differences:

  • File server access:
    • Awingu includes access to file servers via WebDAV or CIFS via the Awingu ‘files’ section. Files can be opened from Awingu ‘files’ with associated published applications
    • Via Awingu files, one can also ‘share’ files (large or small) similar to the functioning of WeTransfer (with the exception that you don’t need to upload your file(s) into a 3rd party cloud)
  • Awingu comes with a built-in Reverse proxy to enable access to (internal) web applications without the need for RDP (nor RDS CALs)
  • UX:
    • I’m too biased to judge on the intuitiveness and look and feel of the workspace front-end. I’m not going to comment on it 😊

 

 

    • Multi-monitor capabilities in Awingu are better developed with multiple options (more on this feature)
  • Smartcard support (in-app usage): Awingu can support the use of smartcard (e.g. eID card) within applications (e.g. reading an eID card info) with the support of its RAH (Remote Application Helper). The RAH is the only exception in Awingu’s HTML5 centric story. The RAH is an agent that needs to be installed on the local computer (Windows, MacOS or Linux). Guacamole does not support in-app usage.
  • Security & compliance: Awingu also comes with…
    • built-in Context Awareness capabilities (e.g. based on location or IP address as context)
    • built-in usage audit and anomaly detection (which can be hooked-up into a SIEM)
    • Single Sign-On (SSO) capabilities over SAML or OpenID Connect without vaulting passwords in the Awingu appliance. Guacamole does support SSO, but leverages password caching. We believe the Awingu setup is more secure.
    • SSL encryption built-in
  • Also, from an architecture perspective there are differences:
    • Awingu is delivered as a virtual appliance, while Guacamole requires installing multiple services (or multiple docker containers which require to be linked). We believe the virtual appliance does not only offer significant benefits in speed of deployment but especially stands out in simplicity.
    • Inside the Guacamole Server, Guacamole will behave different than Awingu as it leverages in an internal translation protocol (RDP Guacamole protocol HTML5) while Awingu does not. This makes Awingu a more resource optimized HTML5 gateway (but obviously, Awingu runs a lot of other services on the same virtual appliance).
    • Awingu can enable HA (High Availability). In a multi-node deployment, Awingu can fail-over between nodes when issues arise.
    • Awingu comes with out-of-the-box multi-tenancy.

Conclusion

So, Guacamole vs. Awingu? A lot of similarities, but even more differences. This blog post is based on our knowledge of Guacamole – which might not be complete, we don’t pretend to be Guacamole experts – and takes a deeper look into those elements that we hear our customers mostly talk about.

Speaking of those Awingu customers, could be interesting to know that they are typically part of these following groups:

  • Organizations (public or private) that enable:
    • Work from Home
    • Contractor Access
    • Secure intra-network access
  • Cloud/managed service providers that offer their customers a digital workspace
  • ISVs (making legacy applications available in the browser, just like SaaS)

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Parallels 
Parallels® is a global leader in cross-platform solutions, enabling businesses and individuals to access and use the applications and files they need on any device or operating system. Parallels helps customers leverage the best technology available, whether it’s Windows, Linux, macOS, iOS, Android or the cloud.

About Ceeyu
Ceeyu provides a cloud-based analysis of a company’s digital presence, outside-in. This posture analysis displays all IT assets visible to any internet user, including malicious ones applying a similar analysis to gather intelligence to determine their attack paths. Ceeyu aims to quickly expand its intelligence gathering, support to standardize the results and automate the analysis to minimize its cost and provide continuously near real-time posture analysis.

About Toreon
Toreon is the largest Flemish originated cybersecurity expert services company. Grown from a team of specialized professionals, the company expanded rapidly organically. Toreon analyses the cybersecurity posture from the inside-out. A cybersecurity analysis can quickly require between 100 and 200 different scans that need to be executed, resulting in information that requires analysis. To optimize its services to its customers, but also to optimize the internal expert resources, Toreon has started to automate these analyses, but aims to further expand this process automation and by adding automated intelligence.

About VUB Labs
The VUB Software Languages Lab and the VUB Artificial Intelligence Lab are both innovative engineering departments from one of the leading Flemish universities in Belgium. Both have a long-standing scientific and industry-supporting background. Their expertise from the domain of applying AI-based automation and fuzzing technologies will be supporting the technology companies throughout the two-year project.

About LSEC
LSEC, an industry association that celebrates its 20th anniversary in 2022 will be focusing on the standardization work for automated postures, in relation to third party risk management analysis and relaying to developing industry standards in the US and EU. For more information, please contact Ulrich Seldeslachts, MD LSEC, Sebastien Deleersnyder, CTO Toreon, or any of the industry and scientific partners.

New cybersecurity project to decrease online vulnerability with the help of Flanders Innovation & Entrepreneurship funding

Antwerpen, Bonheiden, Brussel, Gent and Leuven, Belgium, February 1st, 2022. A team of three Flemish technology and services companies and three research groups have started working on the APAX project. A two-year project, Automated Posture Analysis that Scales (APAX) will investigate the risks related to the digital presence of online assets in an automated manner that can adapt itself to the requirements of hyper scaling. The goal of the project is to achieve a higher level of cybersecurity and avoid negative impact from vulnerabilities such as Log4J by maximising the usage of automated processes.

Industry project partners Awingu, Ceeyu and Toreon will join forces to research, explore and build technologies thanks to a cybersecurity funding initiative from VLAIO, the Flemish government agency for innovation and entrepreneurship. The three companies will apply ongoing research and inspire academics for future work to help automate the analysis of threats and challenges in cybersecurity. They will do so using the expertise from research partners VUB Software Languages Lab and VUB Artificial Intelligence Lab, together with industry association LSEC.

Limited resources

With the ongoing digitalization and continuous evolving cloud, internet technologies and applications running on them, new cybersecurity challenges appear while many older ones have not yet been resolved. The recent Log4J vulnerability that started early December 2021 continues to ripple throughout 2022 and will likely last for months or even years to come. The vulnerability kept cybersecurity teams busy during the end-of-year holiday period. All systems and applications needed to be inspected and analysed for potential business risks that needed mitigation. Most organizations identified this as a labour-intensive activity, eating away their limited resources. They realised that an automated approach to protection, is a better way to go.

Maximize automation

The fundamental goal of the APAX project is to avoid malicious activities to happen and to avoid active business systems and applications from being inaccessible, infringed, unreliable, held hostage or being abused to trade illicit content. To keep up with these challenges and evolutions, cybersecurity will need to evolve from a manual, labour-intensive approach to automated prevention, detection, mitigation, reaction, incident handling, process management, reporting, analysis, and recovery. This must, of course, happen in close collaboration with the operating parties, supporting businesses, people, and processes.

Increase efficiency

The APAX project partners will work on improving minimally 50 partially automated assessments for cybersecurity postures. Further automation will increase the efficiency of cybersecurity experts and halve the time spent on each individual case. Maximizing automation decreases the cybersecurity reaction time and reduces the repetitive work of security specialists, allowing them to focus on their expert work.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Parallels 
Parallels® is a global leader in cross-platform solutions, enabling businesses and individuals to access and use the applications and files they need on any device or operating system. Parallels helps customers leverage the best technology available, whether it’s Windows, Linux, macOS, iOS, Android or the cloud.

About Ceeyu
Ceeyu provides a cloud-based analysis of a company’s digital presence, outside-in. This posture analysis displays all IT assets visible to any internet user, including malicious ones applying a similar analysis to gather intelligence to determine their attack paths. Ceeyu aims to quickly expand its intelligence gathering, support to standardize the results and automate the analysis to minimize its cost and provide continuously near real-time posture analysis.

About Toreon
Toreon is the largest Flemish originated cybersecurity expert services company. Grown from a team of specialized professionals, the company expanded rapidly organically. Toreon analyses the cybersecurity posture from the inside-out. A cybersecurity analysis can quickly require between 100 and 200 different scans that need to be executed, resulting in information that requires analysis. To optimize its services to its customers, but also to optimize the internal expert resources, Toreon has started to automate these analyses, but aims to further expand this process automation and by adding automated intelligence.

About VUB Labs
The VUB Software Languages Lab and the VUB Artificial Intelligence Lab are both innovative engineering departments from one of the leading Flemish universities in Belgium. Both have a long-standing scientific and industry-supporting background. Their expertise from the domain of applying AI-based automation and fuzzing technologies will be supporting the technology companies throughout the two-year project.

About LSEC
LSEC, an industry association that celebrates its 20th anniversary in 2022 will be focusing on the standardization work for automated postures, in relation to third party risk management analysis and relaying to developing industry standards in the US and EU. For more information, please contact Ulrich Seldeslachts, MD LSEC, Sebastien Deleersnyder, CTO Toreon, or any of the industry and scientific partners.

Municipality of Avezzano chose Awingu to solve their remote working challenge

The Municipality of Avezzano is a small town in the province of L’Aquila (Abruzzo) and its territory extends over 100 square kilometers. It is made up of the main town and some hamlets and has more than 40.000 inhabitants. The IT service of the municipality consists of 4 people, who directly provide support and maintain the infrastructure for the approximately 200 employees equipped with IT tools.

During the 2020 pandemic lockdown, the municipality’s ICT service faced the challenge of “smart working” in order to allow their employees to continue in their valuable work of service to citizens and institutions. The classic equipment of municipal employees were desktop devices, posing an additional challenge to the Municipality’s ITC team: since it was not possible to equip each employee with a laptop, they were looking for a way to allow connections from the outside via the employees’ personal devices. The challenge was especially daunting considering the heavy security requirements an institution such as Avezzano has to adhere to.

Connecting to desktops in the municipal office

"Our partner IFIConsulting suggested Awingu to us, and we immediately identified simplicity and ease of use - combined with a high level of security - as the key elements of the solution. In a short time we installed and configured Awingu, enabling the security of two-factor authentication and thus allowing our users to connect securely from home to their PC located at the municipal offices, using any device they had at home."
Alberto Di Berardino

Awingu was installed on a VMWare virtual machine and was configured by enabling the MFA function and then connecting the various desktop machines with RDP.  On the devices used by remote users, the software for the management of USB keys for the digital signature of documents was configured and integrated into Awingu, which was another critical element indispensable for the proper performance of the public officials’ work.

In addition, a whole set of security features were configured in Awingu to prevent the presence of administration data on local devices.

All the work was carried out independently by the IT department of the municipality: “even the integration with LDAP and in general, all the configuration was easy and fast”.

"All users were very satisfied with the adopted solution and we didn't find any complaints, not even from users using limited bandwidth connections."
Giacomo Calisse

The key role played by our technology partner IFIConsulting allowed us to identify the solution to our challenge in a very short time. IFIConsulting’s constant presence and collaboration were invaluable in addressing existing issues and were crucial in defining our future needs in terms of resources and performance.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Parallels 
Parallels® is a global leader in cross-platform solutions, enabling businesses and individuals to access and use the applications and files they need on any device or operating system. Parallels helps customers leverage the best technology available, whether it’s Windows, Linux, macOS, iOS, Android or the cloud.

Renaissance selected as Irish Distribution Partner for Awingu

Dublin, Ireland, 19th January 2022 – Similarly to other leaders across the globe, the Irish government recommend working from home to fight the spread of COVID-19. Many organisations have already shifted to a more permanent remote working approach, with a recent survey showing more than 90% of Irish executives have hired, or plan to hire people to develop their remote work policy. But with cyber-attacks continuing to rise, how can organisations ensure their remote assets are adequately protected?

Too often, many are still relying on the use of a VPN (Virtual Private Network), but these lack the granular controls needed to allocate users with specific rights and should never be relied upon as a single solution to enable remote working. To provide secure remote access, a flexible solution that can be scaled up or down when required is essential.

Awingu is a leading provider of secure remote access technology that has been recognised by Gartner as a ‘Cool Vendor in Unified Workspaces’. Organisations of all sizes can use Awingu as a cost-effective and simple workplace solution that, unlike other providers, does not require agents or software to be installed on end-user devices. Awingu runs entirely in the browser, where it combines existing applications into one online workspace without hassle, including SaaS and “legacy” Windows or Linux applications.  

"We believe that the Renaissance partnership with Awingu introduces a cost effective method to more Irish organisations working remotely, helping them to become more agile and effectively prepared for future cyber-attacks."
Michael Conway

Awingu firmly believes in a “Zero Trust” security context for businesses. Zero Trust is an all-encompassing strategy involving users, devices, applications, networks and more. The solution enables more secure hybrid working and BYOD (Bring Your Own Device) policies through providing encrypted connections, multi-factor authentication, context-awareness, a full usage audit and eliminating the need to store data locally on devices.

"It is really important for us to make Zero-Trust-grade security more accessible to more organisations. Extending our reach into Ireland through the help of Renaissance is an important step forward in our mission to enable all organisations to work securely regardless of their employees location."
Keith Joseph

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Parallels 
Parallels® is a global leader in cross-platform solutions, enabling businesses and individuals to access and use the applications and files they need on any device or operating system. Parallels helps customers leverage the best technology available, whether it’s Windows, Linux, macOS, iOS, Android or the cloud.

×

Hello!

Click one of our contacts below to chat on WhatsApp

×